IBM FileNet Content Manager: Mehrere Schwachstellen ermöglichen Denial of Service

Summary

Product

Vulnerabilities 2

• Medium 5.5
  CVE-2022-25169

  Apache Tika BPGParser Memory Usage DoS

  The BPG parser in versions of Apache Tika before 1.28.2 and 2.4.0 may allocate an unreasonable amount of memory on carefully crafted files.

  Apache Software Foundation Apache Tika tika tika Debian Ubuntu Maven
  May 16, 2022
• Medium 5.5
  CVE-2022-30126

  Apache Tika Regular Expression Denial of Service in Standards Extractor

  In Apache Tika, a regular expression in our StandardsText class, used by the StandardsExtractingContentHandler could lead to a denial of service caused by backtracking on a specially crafted file. This only affects users who are running the StandardsExtractin…

  Apache Software Foundation Apache Tika tika tika Debian Ubuntu Maven
  May 16, 2022

Revision history

1. 2023-01-01 #1

   Initiale Fassung

References

• IBM Security Bulletin vom 2023-01-01
  https://www.ibm.com/support/pages/node/6606653